Lucene search

[email protected]CVE-2008-6710

HistoryApr 10, 2009 - 10:00 p.m.

CVE-2008-6710

2009-04-1022:00:00

[email protected]

web.nvd.nist.gov

cve-2008-6710

avaya

communication manager

vulnerability

remote

authenticated

root privileges

6.7 Medium

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.005 Low

EPSS

Percentile

75.8%

JSON

Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated administrators to gain root privileges via unknown vectors related to “configuring data viewing or restoring credentials.”

Affected configurations

NVD

Node

avayacommunication_managerMatch3.1

avayacommunication_managerMatch3.1.1

avayacommunication_managerMatch3.1.2

avayacommunication_managerMatch3.1.3

avayacommunication_managerMatch4.0

avayacommunication_managerMatch4.0.1

avayacommunication_managerMatch4.0.1sp15215

avayacommunication_managerMatch4.0.1sp15500

avayacommunication_managerMatch4.0.2

avayacommunication_managerMatch4.0.2sp1

avayacommunication_managerMatch4.0.3

CPENameOperatorVersion
avaya:communication_manageravaya communication managereq3.1
avaya:communication_manageravaya communication managereq3.1.1
avaya:communication_manageravaya communication managereq3.1.2
avaya:communication_manageravaya communication managereq3.1.3
avaya:communication_manageravaya communication managereq4.0
avaya:communication_manageravaya communication managereq4.0.1
avaya:communication_manageravaya communication managereq4.0.2
avaya:communication_manageravaya communication managereq4.0.3

CPE	Name	Operator	Version
avaya:communication_manager	avaya communication manager	eq	3.1
avaya:communication_manager	avaya communication manager	eq	3.1.1
avaya:communication_manager	avaya communication manager	eq	3.1.2
avaya:communication_manager	avaya communication manager	eq	3.1.3
avaya:communication_manager	avaya communication manager	eq	4.0
avaya:communication_manager	avaya communication manager	eq	4.0.1
avaya:communication_manager	avaya communication manager	eq	4.0.2
avaya:communication_manager	avaya communication manager	eq	4.0.3

References

secunia.com/advisories/30799

support.avaya.com/elmodocs2/security/ASA-2008-270.htm

www.osvdb.org/46582

www.securityfocus.com/bid/29939

www.voipshield.com/research-details.php?id=79

www.vupen.com/english/advisories/2008/1944/references

exchange.xforce.ibmcloud.com/vulnerabilities/43386

6.7 Medium

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.005 Low

EPSS

Percentile

75.8%

JSON

Related for CVE-2008-6710

cvelist1 nvd1 prion1